search

xaitax / CVE-2024-6387_Check

CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH
GNU General Public License v3.0
460 stars 88 forks source link

Connection TCP reset during grace-time-check crashes program #33

Open agibson2 opened 4 months ago

agibson2 commented 4 months ago

While waiting with the connection open during the grace-time-check, If a connection is reset by the server or by some other network device between the systems, the program crashes and doesn't display any results. I created a patch for it and made a small addition to catch the ConnectionResetError and changed the text to say Session was reset instead of Session was closed. I left it as being vulnerable in my change. Maybe creating a new category for network errors and put a new report section for those might be the best idea instead of leaving it in the vulnerable category, but since I am aware of what it means, I just left it.

The changes are here... If you want this change, I can submit a pull request for it.

https://github.com/xaitax/CVE-2024-6387_Check/compare/main...agibson2:CVE-2024-6387_Check:main

xaitax commented 3 months ago

Hi @agibson2

yes, that would be great, thank you! And sorry for the delay - vacation time. :)